The Dutch Data Protection Authority (AP) announced a €825 million (about $966 million) fine against Uber on August 17, citing violations of Europe’s General Data Protection Regulation (GDPR). The regulator said Uber’s automated system for suspending driver accounts failed to provide meaningful human review or a clear way for drivers to challenge the decisions.
What the regulator found
According to the AP’s decision, Uber deactivated driver accounts through computer algorithms without adequately informing the drivers. GDPR rules prohibit decisions that have a significant impact on individuals when they are made solely by automated means. The authority concluded that Uber breached drivers’ right not to be subject to such automated decision‑making and also violated the right to be informed.
How Uber responded
Uber’s spokesperson said the company “strongly disagrees with this decision and disproportionate fine.” The statement added that Uber takes drivers’ rights seriously and that its policies now include human reviews and opportunities for drivers to dispute suspensions. Uber also indicated it will appeal the fine.
Background of the case
The investigation covered incidents in Europe from 2020 to 2022, initially triggered by a complaint filed in France. Because Uber’s European headquarters are located in the Netherlands, the Dutch regulator took jurisdiction. The company had temporarily suspended drivers it suspected of fraud—such as taking unnecessary detours to inflate fares or accepting trips without intending to complete them. Uber maintains that permanent deactivations were not made without human oversight.
Significance of the penalty
The €825 million sanction is the second‑largest ever issued under the GDPR, trailing only a €1.2 billion fine levied against Meta by Ireland in 2023 for illegal data transfers to the United States. The AP described the Uber case as a “serious matter” warranting a large fine, emphasizing the importance of protecting individual privacy rights in the digital economy.
Implications for gig‑economy platforms
Regulators across Europe have been increasing scrutiny of gig‑economy companies, focusing on how algorithmic decisions affect workers. The AP’s ruling underscores that platforms must ensure transparent processes and provide clear avenues for appeal when automated systems impact livelihoods. Companies operating in the EU will likely review their compliance frameworks to avoid similar penalties.
Uber confirmed it will appeal the decision, and the case is expected to proceed through Dutch courts. The outcome could shape future enforcement of GDPR provisions related to automated decision‑making and set a precedent for how ride‑share firms manage driver accounts across the continent.
Original reporting: Appleton, WI News Feed (HLL/CB) — read the source article.
